Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 21, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258961 | 5 | 警告 | IBM | - | z/OS 上で稼働する IBM WebSphere Application Server における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-2323 | 2010-07-16 18:40 | 2010-03-22 | Show | GitHub Exploit DB Packet Storm |
| 258962 | 10 | 危険 | IBM | - | IBM Lotus Domino のサーバにおけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0358 | 2010-07-16 15:35 | 2010-01-20 | Show | GitHub Exploit DB Packet Storm |
| 258963 | 9.3 | 危険 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | 複数の Mozilla 製品 の JavaScript エンジンにおける任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-1203 | 2010-07-15 21:46 | 2010-06-22 | Show | GitHub Exploit DB Packet Storm |
| 258964 | 10 | 危険 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Windows 7 上で稼働する Mozilla Firefox における任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-1121 | 2010-07-15 17:21 | 2010-03-25 | Show | GitHub Exploit DB Packet Storm |
| 258965 | 2.1 | 注意 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox の JavaScript インプリメンテーションにおける偽装したポップアップメッセージに従って行動させられる脆弱性 |
CWE-Other
その他 |
CVE-2008-5913 | 2010-07-15 17:20 | 2009-01-20 | Show | GitHub Exploit DB Packet Storm |
| 258966 | 7.4 | 危険 | 日本電気 サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ ターボリナックス ヒューレット・パッカード レッドハット |
- | MIT Kerberos 5 の rename_principal_2_svc() 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2007-2798 | 2010-07-15 17:20 | 2007-06-26 | Show | GitHub Exploit DB Packet Storm |
| 258967 | 7.9 | 危険 | 日本電気 サイバートラスト株式会社 MIT Kerberos ヒューレット・パッカード ターボリナックス レッドハット |
- | MIT Kerberos 5 RPC ライブラリの gssrpc_svcauth_unix() 関数における任意のコードを実行される脆弱性 | - | CVE-2007-2443 | 2010-07-15 17:19 | 2007-06-26 | Show | GitHub Exploit DB Packet Storm |
| 258968 | 9.3 | 危険 | 日本電気 サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ ターボリナックス ヒューレット・パッカード レッドハット |
- | MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数における不正なメモリ領域が解放される脆弱性 | - | CVE-2007-2442 | 2010-07-15 17:19 | 2007-06-26 | Show | GitHub Exploit DB Packet Storm |
| 258969 | 4.3 | 警告 | VMware | - | 複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-2277 | 2010-07-14 17:27 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 258970 | 6.9 | 警告 | VMware | - | 複数の VMware 製品の USB サービス における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1140 | 2010-07-14 17:27 | 2010-04-9 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 21, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249821 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus debian_linux ubu… |
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploita… |
CWE-416
Use After Free |
CVE-2018-12378 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249822 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exp… |
CWE-416
Use After Free |
CVE-2018-12377 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249823 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12376 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249824 | 8.1 |
HIGH
Network |
mozilla |
firefox firefox_esr thunderbird |
Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the "Mark of the Web." Without the w… |
NVD-CWE-noinfo
|
CVE-2018-12368 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249825 | 4.3 |
MEDIUM
Network |
debian canonical mozilla |
debian_linux ubuntu_linux firefox thunderbird firefox_esr |
In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals. In that work PerformanceNavigationTimi… |
CWE-20
Improper Input Validation |
CVE-2018-12367 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249826 | 8.8 |
HIGH
Network |
mozilla debian canonical |
firefox thunderbird firefox_esr debian_linux ubuntu_linux |
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which resul… |
CWE-190
Integer Overflow or Wraparound |
CVE-2018-12361 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249827 | 4.3 |
MEDIUM
Network |
mozilla canonical |
firefox ubuntu_linux |
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability … |
CWE-200
Information Exposure |
CVE-2018-12358 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249828 | 6.5 |
MEDIUM
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability af… |
CWE-125
Out-of-bounds Read |
CVE-2018-12366 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249829 | 6.5 |
MEDIUM
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private l… |
CWE-200
Information Exposure |
CVE-2018-12365 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249830 | 8.8 |
HIGH
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious sit… |
CWE-352
Origin Validation Error |
CVE-2018-12364 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |